CVE-2014-7911-CVE-2014-4322_get_root_privilege

CVE-2014-7911poc Nexus5 Android 4.4.4KTU8P 用のローカル root エクスプロイト 作者: andy Webサイト: https://blog.csdn.net/koozxcv ビルド方法 プロジェクトを eclipse にインポートして、ビルドしてください。 バグ情報 http://seclists.org/fulldisclosure/2014/Nov/51 解析...

CVE-2022-35841

CVE-2022-35841 これは理論だけをまとめた小さなメモ書きです。このバグは競合してしまい、実際にきちんとテストするまでには至りませんでした。 EnterpriseAppMgmtSvc は、COM オブジェクトを実装する興味深いサービスです。Windows Phone 時代からあるようで、実際、このサービスが実装する COM インターフェイスのほとんどは、Windows Phone でのみ動作するデッドコードです。OneCore のおかげで！ 非 WCOS システムでデフォルトで動作するように見える唯一のコクラスは EnterpriseModernAppManager です。MS...

acheron

About Acheron is a library inspired by SysWhisper3/FreshyCalls/RecycledGate, with most of the functionality implemented in Go assembly. acheron package can be used to add indirect syscall capabilities to your Golang tradecraft, to bypass AV/EDRs that makes use of usermode hooks and instrumentatio...

CVE-2019-6329

HP Support Assistant 中的本地权限提升漏洞 通过滥用硬链接实现 HP Support Assistant 中的本地权限提升 研究人员：Bkav 的 ManhNDd 描述 在 HP Support Assistant GUI 中，当你点击 检查更新和消息 时，服务 HP Support Solution Framework 会运行一些任务，启动 HPSAObjUtil8.exe（以 SYSTEM 权限运行），该程序会更改 C:\ProgramData\Hewlett-Packard\HP Support Framework\Logs\Temp\HPSA 中所有 .xml...

CVE-2014-7911_poc

CVE-2014-7911poc Nexus5 Android 4.4.4KTU8P 用ローカルrootエクスプロイト 著者: retme [email protected] Twitter: @returnsme & Weibo: @retme ウェブサイト: retme.net ビルド方法 プロジェクトをEclipseにインポートしてビルドします。 ./cve20147911/assets/msmattack は CVE-2014-4322 エクスプロイトのバイナリファイルです。こちらで入手できます:...

CVE-2026-76699

A buffer overflow vulnerability exists in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to cause a denial-of-service. Successful exploitation could allow an attacker to crash the impacted...

CVE-2026-76699

CVE-2026-76699 is a buffer overflow in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways . An unauthenticated adjacent attacker with high attack complexity can crash the service, causing temporary disruption to network operations. The CVSS 3.1 s...

EUVD-2026-79225

A buffer overflow vulnerability exists in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to cause a denial-of-service. Successful exploitation could allow an attacker to crash the impacted...

Astra Linux – Vulnerability in Keepalived

In Keepalived versions up to 2.2.4, the D-Bus mechanism does not sufficiently restrict the destination of messages, allowing any user to inspect and manipulate any property. This leads to bypasses of access controls in certain situations, where a unrelated D-Bus system service has a settable...

omapi-cve-2015-6606-exploit

CVE-2015-6606の検証用シンプルエクスプロイト これは、SEEKスマートカードサービスバージョン3.1.0以下に存在するコードインジェクション脆弱性（CVE-2015-6606、Google内部バグ ANDROID-22301786）を検証するためのシンプルなエクスプロイトです。この脆弱性により、細工されたAndroidアプリケーションパッケージがスマートカードシステムサービスの実行コンテキストに任意のコードを注入できます。このコードは、このシステムサービスに付与されたすべての権限を継承します。これには、通常サードパーティアプリには付与されない署名またはシステム権限が含まれます...

CVE-2026-7791

CVE-2026-7791 PoC: デフォルトで特権昇格 Amazon WorkSpaces におけるローカル特権昇格 の研究用概念実証 Skylight Workspace Config Service での TOCTOU + SYSTEM レベルの任意ファイル書き込み。 完全な技術的詳細: Cymulate ブログ | ---|--- CVE| CVE-2026-7791 ベンダー| AWS Security Bulletin 2026-025-AWS 修正バージョン| Skylight 2.6.2034.0 著者| Ben Zamir, Cymulate Research Lab...

Astra Linux – Vulnerability in glib2.0

A issue was discovered in GNOME GLib before version 2.78.5, and also in versions 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus...

CVE-2026-50544

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

CVE-2026-50544 NortheBridge/luminalshine has Incorrect Permission Assignment for Critical Resource and Creation of Temporary File in Directory with Insecure Permissions

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

CVE-2026-50544

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

EUVD-2026-57698

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

CVE-2026-50544 NortheBridge/luminalshine has Incorrect Permission Assignment for Critical Resource and Creation of Temporary File in Directory with Insecure Permissions

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

CVE-2026-14479

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM...

CVE-2026-14479

CVE-2026-14479 affects the Autodesk Installer IPC frame parser. A maliciously crafted input can cause improper validation of an input-specified position or offset, producing an out-of-range substring operation. The resulting condition may cause the NT AUTHORITY\SYSTEM service to terminate, yieldi...

CVE-2026-14479 Denial of Service in Autodesk Installer IPC Channel

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM...